svn commit: lorikeet r699 - in trunk/heimdal: . cf doc kdc
kuser lib/asn1 lib/des lib/des/imath lib/gssapi lib/hdb lib/hx509
lib/hx509/data lib/krb5 lib/roken tests tests/kdc
abartlet at samba.org
Wed Jan 10 21:59:05 GMT 2007
On Wed, 2007-01-10 at 21:51 +0100, Love Hörnquist Åstrand wrote:
> > Yes, if this was an AS-REQ for a service directly, not for the the
> > krbtgt, then we would should lookup the krbtgt key separately, to fill
> > that in.
> What inital ticket services needs the PAC ? Does even the Windows KDC
> fill in the
> PAC for non krbtgt AS requests ?
I've not checked, but if a service was set to require an initial tgt, I
presume this is how it should operate. I suspect we need some tests...
Andrew Bartlett http://samba.org/~abartlet/
Authentication Developer, Samba Team http://samba.org
Samba Developer, Red Hat Inc. http://redhat.com
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.samba.org/archive/samba-technical/attachments/20070111/7969cf2d/attachment.bin
More information about the samba-technical